The "lock" image is due to the fact that they are trusted sources. You know sometimes when you're installing something the message comes up that says "This package comes from an untrusted source, it may be unsafe to install"? That means that the package is coming from a source without a lock next to it. If it does not give you that message the package comes from a source with a lock next to it.